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Abstract. We show that every (2", 2 n , 2", l)-relative difference set D in 
relative to can be represented by a polynomial f(x) G F2" [x], if f(x + a) + 
/(x) + xa is a permutation for each nonzero a. We call such / planar function 
on F2™ . The projective plane II obtained from D in the way of Ganley and 
Spence 1161 is coordinatized, and we obtain sufficient and necessary conditions 
of n to be a presemificld plane. We also consider the nonexistence result of 
the planar function with exactly two elements in its image set. 



1. Introduction 

Let G be a group of order v = mn, N C G and \N\ = n. A fc-subset D 
of G is called a relative difference set with parameters (m,n, fc,A) (abbreviated to 
(to, n, k, A)-RDS), if the list of differences of D covers every element in G\N exactly 
A times, and the elements in N \ {0} not at all, where N is called the forbidden 
subgroup. D is called abelian or cyclic if G has the respective property. When 
n = 1, then a k, A)-RDS is just a (1/, k, A)-diffcrcnce set. 

A special case of relative difference sets appeared first in the work of Bose [1] , 
and the "relative difference set" term was introduced by Butson [TJ. The main 
motivation to study relative difference sets comes from the fact that the existence 
of an (to, n, k, A)-RDS in G relative to ./V is equivalent to the existence of a divisible 
design with the same parameters admitting G as a regular automorphism group. 
If N is normal in G, then TV acts regularly on each point class of this design. 
For further results and references see [29] . For a comprehensive introduction to 
difference sets see Chapter VI of [2J. 

A projective plane consists of a set of lines C, a set of points B, and given any 
two distinct points (lines), there is exactly one line (point) incident with both of 
them, and there are four points such that no line is incident with more than two of 
them. By removing one chosen line and the points on it from a projective plane, 
we get an affine plane which forms a divisible design. 

Two projective plane are called isomorphic, if there is a permutation on C and a 
permutation on B such that the incidence relationship is preserved. A collineation 
(or automorphism) of a projective plane is an isomorphism of the plane onto itself. 

Every projective plane II can be coordinatized with a planar ternary ring, ab- 
breviated to PTR, in a proper way. Different ways of coordinatization will raise 
different PTRs. Moreover, if n has some special types of collineation group, it 
give rise to some extra algebraic properties of the PTR. For instance, using the 
coordinatization method in |21j , if G fix a line pointwisc and acts regularly on 
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the other points, the corresponding PTR is a quasifield, this line is called the 
translation line and IT is a translation plane. For the definitions of PTR, quasifield 
and other basic knowledge of projective plane, see [21] . 

As shown by Ganlcy and Spence [16l Theorem 3.1], let D C G be an RDS relative 
to a normal subgroup N with parameters (m, n, k, 1) = (q, q, q, 1), (q + 1, q — 1, q, 1) 
or [q 2 + q + 1, q 2 — q, q 2 , 1), then £> can be uniquely extended to a projective plane 
II. Furthermore, G acts quasi-regularly on the points and lines of II, and the point 
orbits (also line orbits) of II under G are the cases (b), (d) and (e) respectively 
in Dembowski-Piper classification JT3]- For case (6), let D be a (q, q, q, 1)-RDS in 
(G, +) relative to N, then the projective plane II can be obtained in the following 
way [16] : 

affine points: g E G; 

lines: D+g := {d+g : d E D}, and the distinct cosets of N: N+gi, . . . , N+g q 

and a new line L^; 
points on L^: (gi) defined by the parallel classes {D + gi + h : h e TV} and 

(oo) defined by the parallel classes {N + g±, . , . , N + g q }. 

Under the action of G, the points of II form three orbits: the affine points, {(oo)} 
and the points on except for (oo). The lines of IT also have three orbits: 
{D + g : g E G}, {L^} and all the lines incident with (oo) except for L^. When 
G is commutative, IT is called a shift plane and G is its shift group. 

Denote the cyclic group of order m by 1 m . Ganley [15] and Blokhuis, Jungnickel, 
Schmidt [3] proved the following result: 

Theorem 1.1. Let D be a (q, q, q, 1)-RDS in an abelian group G of order q 2 . 

• [IS] If <7 is even, then q is a power of 2, say q = 2™, and G = Z™ , the 
forbidden subgroup N = , see also [22] for a short proof; 

• [2] If Q is odd, then q is a prime power, say q = p n , and the rank of G, i.e. 
the smallest cardinality of a generating set for G, is at least n + 1 . 

For G abelian and q = p n odd, all the known (q, q, q, 1)-RDS are subsets of 
(Fp™, +), a 2n-dimensional vector space over a finite field F p . Moreover, let D be a 
(q, q, q, 1)-RDS in G, then all the known examples can be expressed as: 

D = {(x,f(x)):xG¥ p n)}, 

where / is a so-called planar function from ¥ p n to itself. A function / : F p »i — > ¥ p n 
is planar if the mapping 

x i ^ f(x + a) - f(x), 

is a permutation for all o / 0. Until now, except for one special family every 
known planar function on F p n can be written, up to adding affine terms, as a 
Dembowski-Ostrom Polynomial f(x) = ^2™j= CijX p +pJ . It produces a commuta- 
tive distributive quasifield plane |12j . namely a commutative semifield plane, on 
which the multiplication is defined by: 

(1-1) x * y := -{f{x + y)- f(x) - f(y)) = £ y" . 

The only known exception was given by Coulter and Matthews |llj : 
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over F371 provided that a is odd and gcd(a, n) = 1, and the plane produced by the 
corresponding RDS is not a translation plane [llj . 

A semifield is a field-like algebraic structure on which the associative property 
of multiplication does not necessarily hold. When the existence of a multiplicative 
identity is not guaranteed, then it is called presemifield. Let § = (F p ™,+,*) be a 
semifield, then the subsets 

iVj(S) = {a G § : (a* x) k y = a* (x * y) for all x,y £ §}, 

-/V m (§) = {a £ § : (x * a) ★ y = x * (a * y) for all x, y € S}, 

N r (E>) = {a€§: (x * y) * a = x * (y * a) for all x, y £ §}, 

are called the left, middle and right nucleus of S, respectively. A recent survey 
about finite semifield can be found in [26]. One important fact that we need here 
is that the order of every finite (pre)semifield is a power of a prime and its additive 
group is elementary abelian. Now let § = (F p n, +, *) be a finite presemifield. Since 
x * y is additive with respect to both variables x and y, it can be written as a 
p -polynomial map: 

n-l 

x*y = ^2 a >ij xP *y p3 \ 

t,J=0 

where a.^ £ ¥ p n . For p odd, the commutative one can be obtained through 
from a (p n ,p n ,p n , 1)-RDS. For p = 2, if a (2", 2", 2", 1)-RDS defines a commutative 
semifield, then we will show later how to get its multiplication in the form of a p- 
polynomial. If a plane II can be coordinatized with a semifield, II is called a 
semifield plane. It can be shown that II is a semifield plane if and only if II and its 
dual plane are both translation plane. In some literatures this condition is used as 
the definition of semifield planes, see for example [26]. 

The remainder of this paper is organized as follows: in Section [2] we give two 
representations of a (2™, 2™, 2™, 1)-RDS in Z™. Then in Section [3] we coordinatizc 
the plane II from a (2 n , 2", 2™, 1)-RDS, and present necessary and sufficient con- 
ditions that II is a semifield plane. In Section [4] we consider planar functions 
/ with #Im(/) = 2. Finally, we consider the component functions of the F£- 
representations. 

2. Representations of D 

Theorem O shows that, every (2", 2 n , 2", 1)-RDS is a subset of ZJ relative to 
2Z4 = Zj. For convenience, we will always say "Zf relative to Zj" instead of 
"Zf relative to 2Z 4 l " in the rest of this paper. Before considering these relative 
difference sets, we introduce some notations for the elements in Z 4 l . Define an 
embedding V : F 2 -> Z 4 = {0,1,2,3} by V(0) = and V(l) = 1, and define 
* : -> Z™ by 

*(x ,xi,--- ,x„_i) = (■0(x o ),V'(a;i),--- , V'C^n-i))- 

Every ^ G Z™ can be uniquely expressed as 

i=[a,b\ :=a* + 26*, 

where a,b £ . For instance 3 € Z4 is |_1 , 1 J . Furthermore, let [a, &J , L c > G ^4 > 
then we have 

[a, 6J + [c, dj = [a © c, 6 e d ® (a c)J , 
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where © is the addition in ZJ? and aOc := (etoco, . . . , a n -ic n -i) with a = (ao, . . . , a n -i) 
and c = (co, . . . , c„-i). 

Remark 2.1. In the language of group theory, ZJ can be seen as an extension of Z2 
by Z2 and all [o, OJ together form a transversal of ZJ? in Z™, and : 7^ X Z2 — > Z 2 l 
is the corresponding factor set (or cocycle). Factor sets is an important tool for 
many combinatorial objects, see |20j for the applications to Hadamard matrices 
and RDSs. 

Let D be a transversal of ZJj - in Z4 , then we can write every element in D as 



where h is a mapping from ZJ/Zj to ZJ . Now assume that D is a (2™, 2™, 2™, 1)- 
RDS, then Z? is also a transversal, otherwise the difference list of D will contain 
some element of the forbidden subgroup Z^. Let [a,b\ £ Z4 and o ^ 0. Notice 
that there is exactly one element in (D + [a, b\) D D, hence the equation 



is bijective for each a ^ 0. Conversely, if h is given such that A/^q is always a 
permutation for nonzero a, then D is a (2", 2 n , 2", 1)-RDS. 

Remark 2.2. In fact, A^o already appears in )19) by Hiramine in the form of factor 
sets. However, our main idea here is to use it to derive special types of functions 
over finite fields. It is more convenient and easier to consider the properties and 
constructions of (2", 2", 2", 1)-RDS, since every mapping from a finite field to itself 
can be expressed as a polynomial. 

The fact h : Z4/Z2 — > ZJ? defined from D by (|2.1[) can be considered as a 
mapping from Fj to itself, hence we call h the F% -representation of a transversal 
D. We will use it to introduce the polynomial representation over a finite field. 

Let B = : i = 0, 1, • • • , n — 1} be a basis of ¥2^ over F2, then we can take 
both h and Ah, a as mappings from F211 to itself using this basis B, and express 
them as polynomials h B , ^h B ,a €E F2«[a;]. Furthermore, for x = X)ILo and 



(2.1) 



|d, h(d)\ = d* + 2h(d) 



[d © a, h(d) © b © (d a) J = /i(d')J , 
holds for exactly one pair (<i, d 1 ), which means the mapping 
(2.2) A h , a : d i-» h(d © a) © © (d a) 



J/ = E"=o 1 e F 2" 1 wc define 



n-l 



i—0 i<j 



and 



/b(i) := h B {x) 2 + hb{x) 



Then 




+ a) + /b(x) + /s(a) + -^a 
(h B (x + a) + /is (a;) + h B (a)) 2 + {hb{x + a) + + [i B {a)) + 

(ft B (a; + a) + ft B (a;) + Ma)) 2 + (x Q B y) 2 
(A hB , a (x) + h B (a)) 2 , 
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and it is straightforward to see that for each o^O (|2.2[) is a bijection if and only if 
V/ B . Q (x) acts as a permutation. We call /s(x) € ¥2n[x] the F2™ -representation of 
D respect to the basis B. To sum up, we have proved the following result: 

Theorem 2.1. Let D C Z™ be a transversal of HQ in Z4, B be a basis of ¥2^ over 
¥2, and h be the -representation of D and f be the ¥2^ -representation /b(x) 
respect to B. Then the following are equivalent: 

(1) D is an RDS in Z4 relative to ZJ, 1 ; 

(2) A/j i( j is bijective for each a ^ 0; 

(3) V/ Bi0 (x) is a permutation polynomial for each a 7^ 0. 

Remark 2.3. Let u, v € F2« , (co, ci, ■ • ■ , c n -i) be a nonzero vector in Fj and do £ 
F2. It is easy to see that by adding affine term ux 2 + v to /b(x) or adding 
yi - + c?o to any coordinate functions of ft. do not change the permutation 
properties of V/ BjQ or Ah, a respectively. Therefore, in the rest of this paper we 
always assume that there is no linear or constant term in fs (x) or the coordinate 
functions of h. 

Since we can always use an RDS in ZJ relative to Z£ to construct a plane of 
order 2™, we call / : F2" — > ¥2" a planar function if for each a 7^ 0, 

f(x + a) + f{x) + xa 

acts as a permutation on ¥2™ ■ As every mapping from ¥2^ to itself can be written 
as a polynomial in ¥2^ [x] , the corresponding polynomial of a planar function is 
called planar polynomial. 

Remark 2.4. For p odd, Dembowski and Ostrom defined planar function in the 
following way: / : F p n — > ¥ p n is planar if and only if for all given a =/= 0, 

f(x + a) -f(x) 

is a permutation on F p ™, see [12]. They showed that {(x,f(x) : x £ F p n)} is a 
(p n ,p n ,p n , 1)-RDS in Zp" relative to Z™ if and only if / is planar. Furthermore 
the planar functions for p odd are also called perfect nonlinear functions, and they 
are useful in the construction of S-boxcs in block cipher to resist some attacks, 
see [2 7) . However, there do not exist perfect nonlinear function / on F2«, since 
f(x + a) — f(x) = f((x + a) + a) — f(x + a). Therefore it is impossible to extend 
the classical definition of planar functions to the case p = 2. 

The advantage of these representations is that we can apply finite fields theory 
to construct and analyze (2™, 2™, 2™, 1)-RDS in Z". Here are some examples: 

Example 2.1. For each positive integer n, every affine mapping, especially f(x) = 
0, is a planar function on F2>». 

Example 2.2. Assume that we have a chain of fields F = Fo 3 Fi D • • ■ D F n of 
characteristic 2 with [F : F„] odd and corresponding trace mappings Tr^ : F — >• F.;. 
In [23], Kantor and Williams present commutative prescmificlds B((Fj)o , (Ci)i) on 
which the multiplication is defined as: 

n n 

(2.3) x*y = xy + (x y £ Tr^Qy) + yJ2 Tr^x)) 2 , 

i=l i=l 

where Ci e F*, 1 < i < n. It is related to a subfamily of the symplectic spreads 
constructed in [8]. In ()2.3j) we have (x^" =1 Tr^^x)) 2 as a planar function on F. 
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Note that this semifield is a generalization of Knuth's binary semifields [25], on 
which the multiplication is defined as: 

(2.4) x * y = xy + (:rTr(y) + yTr(x)) 2 , 

corresponding to the presemifields B((F.;)q, (1)). The planar function derived from 
Knuth semifield is (xTr(x)) 2 . 

Next, we consider the equivalence between (2™, 2™, 2™, l)-RDSs and how an 
equivalence transformation affects the ¥ r 2 L -representation h of a (2", 2™, 2", 1)-RDS 
and * h : F 2 l x F£ ->• Fj which is defined by: 

(2.5) x * h y := h(x + y) + h(x) + h(y) +x&y, x, y G Fg , 

where x <3 y = (x yo,xiyi, ■ ■ ■ ,x n -iy n -i)- 

Let Di and fl 2 C G be two (2", 2", 2", l)-RDSs. They are equivalent if there 
exists some a G Aut(G) and a G G such that a(-Di) = D2 + a. When G is abelian, 
every element in Aut(G) can be expressed by a matrix, see [HI [31] for details. For 
our case G = Z™, the corresponding result is: 

Lemma 2.2 ( 18 ). There is a 1-1 mapping p from Mat nX 7i(Z4) to Hon^ZJ , ZJ) . 
Furthermore, p{L) is an automorphism of 171 if and only if (L mod 2) is invertible. 

Theorem 2.3. Let D x and D 2 be (2 n ,2 n ,2 n ,l)-RDS in Z% relative to Z%, let 
h\,hi : ¥2 — > Fj be their Fj -representations respectively. Then, there exist a := 
p(L) G Aut(Z^) such that D2 = ot{D{) if and only if 

(2.6) M(x) * h2 M(y) = M(x * hl y), 

where M is defined by [L mod 2) acting as an element o/Mat nX „(F2). 

Proof. By abuse of notation, we also use \1/ to denote the mapping from Mat nx „(F2) 
to Mat nx „(Z4) which acts on every entry of the matrix as the embedding tp : ¥2 — > 
Z 4 = {0,1,2,3} with 4>(Q) = and = 1. 

"^>" Assume that L = M* +2 A*, where L G Mat„ xn (Z 4 ), M, N G Mat„ xn (F 2 ). 
It is routine to check that 

a([a, b\ ) = a(a* + 26*) = M*a* + 2(Af*6* + A*a*) 

and 

M*a* = (A/a)* + 2(Q(M,a))* 
where the fc-th coordinate of Q(M,x) is Q k (M,x) = Yli<j a ki&kjXiXj with M = 
((%■) and x = (xq, • ■ ■ , i n -i) T . Thus we have 

a( Lx, /i(x)J ) = [Mx, Mh{x) + Nx + Q(M, x)\ . 
Therefore by D2 = ct(Di) we have: 

(2.7) h 2 (Mx) = Mhx{x) +Nx + Q(M,x). 
Notice that 

Q k (M, x + y) + Qk(M, x) + Q k (M, y) + M k (x y) 
= } j auaki{{xi +yi){xj +yj) +XiXj + ViVj) + ^a ki x l y i 

i<j i 

= ^a ki x i ^a kj y : j 

i 3 

=(Mx My) k . 
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Together with (J23]) and (|27f]l . we get (|2~6)) . 

"^=" Let Z?2 := a'{Di) with a' := p(M*), and h! 2 be its Ff-representation. 
Similarly as the proof of (|2.7[) . we have 

fc^Mi) = Mhx{x) + Q(M,x). 

Furthermore if (|2.6[) holds, then x y = x *h 2 2/i i- e - 

ft 2 (x + y) + /i 2 (x) + h 2 (y) = h 2 (x + y) + /i 2 (x) + /i 2 (y), 

which means that 

(fta + ?4)0 + y) + (fta + J^X*) + (Aa + ^Xtf) = 0, 

for all x,y. Hence l(x) := h' 2 {x) + h 2 (x) is a linear function on F 2 l . Denote N' the 
matrix defined by I on FJ. Let y := Mx, we have 

[y,h 2 (y)\ = [y,h' 2 (y) + N'y\ 

= [Mx, Mhx{x) + N'Mx + Q(M, x)J . 

By taking N := N'AI and L := M* + 27V*, we can easily check that D 2 = a(-Di) 
with a := /?(£)• □ 

It is also easy to show that: 

Proposition 2.4. Let D be a (2™, 2™, 2™, 1)-RDS in ZJ relative to ZJ, [a, € ZJ 

and /i, /i : F 2 — >• F 2 be the F 2 -representations of D and Z? + [a, b\ respectively. 
Then we have 

x *h y = h(x + y + a) + h(x + a) + h(y + a) + b + xQy, for x, y £ F£. 

3. COORDINATIZATION OF II 

Let h be a F^-representation of D, which is a (2'\ 2 n , 2™, 1)-RDS in ZJ relative 
to N = Z' 2 l with h(0) = (if /i(0) ^ 0, then take D - [0, h(0)\ instead of D), and 
II is the plane defined by D in Ganlcy's manner in the section of instruction. By 
using the method of Hughes and Piper in Chapter V of [21] , we label the points of 
n by the elements in FJxFJ, F£ and oo. 

(i) Take three lines L x := D, L y := N and to form a triangle, and we label 
three points: (0, 0) := L x n L y , (oo) := L, y n Loo and (0) := L x n Lex,; 

(ii) For |_x, /i(x)J G -D, label the corresponding point on L x by (x, 0); 

(iii) Assign (1) to the intersection point J of L x and the affine parallel class 
{D + |1, k\ :k£ F 2 } (here 1 £ F' 2 l is the vector (0, 0, ... , 1) for short); 

(iv) Let X = (x, 0) be a point on L x , label n L y by (0,x). In fact, JX 
is the set D + \ l,k\ for some k £ F 2 which is determined by the equation 
(D + [1, k\) n D = (x, h(x)). By some calculation we get 

(D+[i,k\)nN= Lo,(i*x)j, 

where * := *h is defined as in (|2.5p : 

(v) For each line through (1,0) which intersect L y at (0, to), assign (to) to its 
intersection with L^, which is on D + \y, k\ with v * 1 = to; 

(vi) For each point £ not on L a , L. y or L^, if Xi? n Z/ y is (0, y) and Fi? n L x is 
(x,0), then E is given the coordinate (x,y). 
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Let 7k- be the multiplication of the planar ternary ring of II which is coordinated 
as above, then it is routine to check that 

(3.1) m * x — r(m * x), 

where r : 1 * x n- x, and the identity element of (FJ,*, +) is 1. 

Remark 3.1. The above steps of points labeling of II are slightly different from 
the original one by Hughes and Piper: we first label the points on L x instead 
of L y . However, this makes no difference essentially. Therefore, by the corollary 
of Theorem 6.3 in [21], is a translation line if and only if * satisfies the left 
distributive law, namely (1^,+,*) is a quasificld. 

Next we consider the conditions under which n is a scmificld plane. 

Theorem 3.1. Let G := III an d h '■ ^2 — * ^2 oe an ^-representation of D, which 
is a (2 n ,2",2 n , 1) -RDS in G relative to 1%, let * := * h and k be defined by < TOj) 
and 13. 1\) respectively. Let /s(x) be an¥2^ -representation of D with respect to basis 
B. Then the following are equivalent: 

(1) (FJ,*, +) is a commutative semifield; 

(2) (F2,*,+) is a commutative presemifield; 

(3) h(x + y + z) + h(x + y) + h(x + z) + h(y + z) + h(x) + h(y) + h{z) = 0, for 
all x,y,z € F 2 l ; 

(4) Every component function of h(x) is of degree 2 at most; 

(5) is a Dembowski-Ostrom polynomial; 

(6) n is a commutative semifield plane. 

Proof. We only need to prove the distributivity of * and * for one side by their 
commut at i vity. 

Assume that * defines a multiplication of presemifield, then x 1— > 1 * x is an 
additive mapping by the distributivity of *, so is its inverse r : 1 *x 1— >■ x. Therefore 
we have 

(x + y)-k z — x-k z — y-kz 
=t((x + y) * z) — t(x * z) — r(y * z) 
=t(x * z + y * z — x * z — y * z) 
=0, 

for all x,y,z £ from which we deduce the distributivity of*, i.e. (2) (1). 

Next, we assume that * defines the multiplication of a scmificld. Let g{x) := xkx, 
since x * x = x we get that 

g{x) = t(x * x) = t(x), 

and 

g(x + y) =(x +y)* (x + y) 

=x -kx + x-ky + y-kx + y-ky 
=x k x + y -k y 

=g(x) + g(y) 

by the distributivity and commutativity of *. Hence r is also an additive mapping, 
so is its inverse. Therefore, (x+y)*z = r~ 1 ((x+y)kz) = t _1 (xkz+y-kz) = x*z+y*z, 
i.e. (1) => (2) 
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The equivalence between (2) and (3) follows directly from the expansion of (x + 
y) * z = x * z + y * z; 

(4) (2): If (4) holds, then we see that for fixed y ^ every component function 
of x i->- x * y is an additive mapping from F 2 to F2 , which means the distributivity 
of *; 

(2) =>■ (4): Consider any component function of x * y, which defines a bilinear 
form B(x,y) : F 2 x F 2 — > F2. By the relationship between quadratic forms and 
bilinear forms, wee see that the corresponding component functions of h must be 
of degree 2 at most; 

(4) <S=> (5): Since in Remark 12.31 we assume that there is no linear or constant 
term in /b{x), therefore Jb{x) is a Dembowski-Ostrom polynomial if and only if 
all components of h(x) are of degree < 2 (here is also considered as a Dembowski- 
Ostrom polynomial); 

(I) => (6) is directly from the definition; 

(6) =>■ (1): Assume that II is a commutative scmifield plane, i.e. by coordi- 
natizing II in a proper way, a commutative scmifield (F 2 ,o,+) can be obtained. 
Now we label the points and lines of II in another way which is different from the 
coordinatization at the beginning of this section. We denote the affine points of II 
by (x,y)<> with i,j/€FJ, and the affine lines by point sets 

[m, fc]<> := {(x, y)<> : mo x + y = k} with m, k £ F 2 , 

and 

Mo :={(k,y)*:ye¥5} with k £ F 2 l . 

Every parallel class of affine lines corresponds to a point, and all such points form 
the line of II. There are 4™ bijections 

a a b ■ {x,y)o i-> (x + a, y + a o x + 6) with a,b £ F 2 , 

which arc collineations of II and together form a shift group G. Furthermore, by 
(24"1 Theorem 9.4], every shift group of II is of the form 

G s := {(x,y)o 1— ^ (x + a,y + (ao s) oa; + &)<>|a,6 € F 2 }, 

where s belongs to the middle nucleus of (F 2 ,o, +). That means there is one so, 
such that G So and G act on II in the same way. It is routine to check that L^, is 
the unique line fixed by G so . Since is also fixed by G, we see that and L m 
are the same line. On the other hand, by the distributive law of (F 2 , o, +), we have 
the collineations 

Pab ■ (x, y) H> (x + a, y + b) with a, b £ F' 2 

which act regularly on the affine points of II and fix the line L^, pointwise. That 
means Lqo = ^oa 

is a translation line. Therefore, by the corollary of Theorem 6.3 in 
|21j . (Fjj,*, +) satisfies the left distributive law. Together with the commutativity 
of *, we see that (F 2 1 ,*, +) is a commutative semificld. 

□ 

Corollary 3.2. Let Di and D 2 be two (2™, 2™, 2™, l)-RDSs in relative to Z 2 l 
which define commutative semificlds and is in both D\ and If there exists 
a £ Aut(Z™ ) and g £ Z4 such that a{D\) = D 2 +g, there is also some j3 £ Aut(Z") 
such that y8(Di) = D 2 . 
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Proof. Let hi be the F^-representation of Di, i = 1,2. Let [a,b\ = g, then by 
= [0, 0J G Di,D 2 we have 6 = /12(a)- Let /12 be the -representation of Z?2 + g, 
then by Proposition 12.41 we have 

x *K 2 y = hi{x + y + a) + h 2 (x + a) + h 2 (y + a) + h 2 (a) + x y 
= h 2 (x + y) + h 2 (x) + h 2 (y) + xQy 
= x *h 2 V, 

the second equality comes from Theorem l3.1f 3). Assume that a = p(L) and M := L 
mod 2 (see Theorem l2.3p . then 

M{x * hl y) = M{x) M(y) = M{x) * h2 M(y). 

Thus by Theorem E3 there is some /3 G Aut(ZJ) such that /?(-Di) = D 2 . 

□ 

By Theorem 13.11 we can obtain a non-translation plane by a non-Dembowski- 
Ostrom polynomial f(x) which acts as a planar function on F2". Hence we propose 
the following open question: 

Question 1. Find a non-Dembowski-Ostrom planar polynomial f(x) G F2"[a;], or 
prove the nonexistence of it. 

Let (Si, *, +) and (§2,*, +) be two (prc)scmificlds with the same cardinality p n , 
they arc called isotopic if there are linear bijective mappings M, N, L : F™ — >• F™ 
such that 

M(x) * N(y) = L(x*y). 
Furthermore, if M = N, then Si are strongly isotopic to S2. The isotopism is 
the most important equivalent relationship between (pre)semifield, since Albert [1] 
showed that two (prc)scmificlds coordinate isomorphic planes if and only in they 
are isotopic. By isotopism we can also get a semifield S from a presemifield P. Let 
* be the multiplication of a presemifield, then choose arbitrary e G P and we obtain 
a semifield multiplication * defined by: 

(x * e) * (y * e) = x * y, 

with the identity e * e. If * is further commutative, then we can also use (|3.1[) to 
define a semifield multiplication. 

When p = 2, there is some result about the commutative (pre)semifields obtained 
by Coulter and Henderson. 

Lemma 3.3 (|10j. Corollary 2.7). Any two commutative presemifields of even order 
are isotopic if and only if they are strongly isotopic. 

Wc have already seen how to get a semifield plane from an RDS. On the other 
hand, given a semifield plane, an RDS containing can also be produced, see |17| by 
Ghinelli and Jungnickel. Now assume D 1 and D 2 are two (2", 2", 2™, 1)-RDS in Z™ 
obtained from two commutative semifields §1 and S2 both with order 2". Denote 
by h\ and h 2 their ¥ 2 -representations respectively, we have hi(0) = h 2 (0) = 
since G Di and D 2 . If D\ and D 2 are equivalent, by Corollary 13.21 there exists 
a G Aut(ZJ) such that a(Di) = D 2 . By Theorem 12.31 §1 and §2 are isotopic. 
On the contrary, if §1 and S2 are isotopic, then by Lemma 13.31 they are strongly 
isotopic, i.e. there exist M, L : FJJ ' — ► F£ such that 

M(x) * hl M(y) = L(x * h2 y), 
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which is 

hi oM(x + y) + h 1 o M (x) + h x o M (y) + M (x) M(y) 
=L(h 2 (x + y) + h 2 (x) + h 2 (y) + xQy). 

Notice that for each quadratic function h : — > Fj and i = 0, 1, • • • , n — 1, the 
term Xjj/j can never appear in the components of h(x + y) + h(x) + h(y), hence 

M(x)QM(y) =L(xQy). 

Let x = y — a, which denotes the vector with a 1 in the i-th coordinate and 0's 
elsewhere. We have 

M(ei) = M( ei ) M(e») = L(e, e*) = L( ei ) 

for each i = 0, 1, • • • , n — 1, which means that M = L. Thus (M(x) */„ M(y)) = 
M(x *h 2 y). By Theorem 12.31 we see that D x and D 2 are equivalent. To sum up, 
we have proved the following proposition. 

Proposition 3.4. Let Si and S2 be two commutative scmificlds with order 2™. Let 
£>i and D 2 be the RDS derived from them. Then Si is isotopic to S 2 if and only if 
D\ is equivalent to D 2 . 

Remark 3.2. For p odd, the equivalence between RDS from commutative semifields 
is equivalent to the strong isotopism between the commutative semifields. As shown 
by Coulter and Henderson [10] , by isotopism one semifield can produce at most two 
scmificlds which are not strongly isotopic. This upper bound can be achieved, 
examples and their proof can be found in [551 133] • 

4. Nonexistence of Boolean Planar Function 

By Example 12.21 we see that there are already quite a lot of planar functions. 
In order to find a non-Dcmbowski-Ostrom planar function, one strategy is to do 
some "small modifications" on the known ones but to keep the planar property. 
One method is called "switching construction" , where one try to change just one 
coordinate function of /. This method was first applied on APN function on F 2 ™ [S] 
Hi] , and it finally provided a counter example to the "APN permutation" conjecture. 
This idea can also be applied on planar function with characteristic 3 and it works 
for some fields with small orders, see [50] . 

In this section, we are going to consider the Boolean planar function case, or 
generally, the planar function / with Im(/) = {0,£}, which can be considered as a 
"switching" of the planar function g = 0. 

Lemma 4.1. Let f be a mapping on ¥ 2 n, £ £ F^ and Im(/) = {0,£}. Then f is 
a planar mapping if and only if for all a ^ and x 

(4.1) f{x + a) + f(x) + f(x + a+i) + f(x + £) = 0. 

a a 

Proof. Clearly (|4.1j) holds if / is planar since Im(_f) € {0, £}, so we suppose that / is 
not a planar function, then by definition for some nonzero a, there exist x, y € F 2 ~ 
such that x 7^ y and 

f(x + a) + f(x) + xa = f(y + a) + f(y) + ya. 
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Since #Im(/) = 2 and xa ^ ya, there is xa + £ = ya, which means that y = x + ^/a 
and 



f(x + a) + f(x) + f(x + a+t) + f(x + 1) = 

a a 



□ 



Given / : F2» — > F2«, define .4/ as the set of (a, 6) such that 

(4.2) /(x + a) + f(x) + f(x + b + a) + f(x + b)=0 

holds. Obviously, x F2n,F2« x and {(a, a) : a G F21} are all contained in Af. It 
is straightforward to prove that 

Lemma 4.2. Let f : F2" — ^ Fan. There are binary operations A,V : F2" x F2« — ► 
F2" smc/i £/ia£ 

(%) If (a, 6), (a + 6,c) e Af, then (a, 6) A (a + 6, c) = (a + 6, 6 + c) <G .A/; 
fSj 1/ (a, 6), (a, cjei/j i/iera (a, 6) V (a, c) = (a, 6 + c) G Af. 

Proof. We just prove the first case as an example. Since (a, b), (a + b, c) G A/, we 
have 

/(z + a) + /(a) + /(£ + & + a) + /(£ + &) = 
/(x + a + 6) +/(z + c + a + 6) +/(x + c) = 0. 

Sum these equations to get 

f{x + c + a + b) + f(x + c) + f((x + c) + (b + c) + (a + b)) + f({x + c) + (b + c)) = 0, 
which means that (a + b,b + c) G Af. □ 

If / is a planar function with Im(/) = {0,£}, then we have that {(a, £/a) : a G 
F|n} C Af by Lemma H7T1 For a given (a ,£/a ) G A/ with a 7^ 0, there is also 
(ao + — , — in A/. Hence we can define 60 := £/ a o and 

(a i+ i, := (ai, 6i) A (a* + &i, — — ) = (a, + &j, 6, H ). 

a, + bi a i+ i 



All these (ai,bi) are contained in A./ by Lemma 14.21 (1). As it is possible that 
di + bi = 0, by abuse of notation we define | := 0. It is easy to see that 

(ai,bi) := (oi+i + — h 6 j+ i,6i+x + ——), 

a.i+i a-i+i 

which means that the sequence ((a^, bi) : i = 0, 1, • • ■ ) is cyclic. Furthermore, there 
are 

a>i+i = a.i + 6i = Oj_x + — , 

and 

6i = Oj + dj+x = a,_x + Oj + — , 

a, 

from which we can deduce that a,_x, ai determine 6^, hence the period of ((at, bi) : 
i = 0, 1, • • • ) is the same as the period of (a, : i = 0, 1, • • • ). 
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Lemma 4.3. Let a € F 2 n and a ^ 0, -y/C- Let ciq := a, ai := a + £/a and define 
sequence S a = (ai : i = 0, 1, • • ■ ) by 

(4.3) a i+ i := aj_i + — . 

Then 

i+1 



(4.4) a 2i = a I + ^ j , a 2 i+i = 

and t/ie period N of S a is 2 ■ ord(l + £/a 2 ). 

Proof. We first prove that there is no i such that a.; = 0. 

Now assume that ai = 0, then by (|4.3[) we see that a^_i = aj+i. Define A := eti_i, 
then further we have 

(Oi-lj Oi+lj &i+4, &i+5, a i+6) = (A, 0, A, — , 0, — , A, 0). 

If A = or then every entry of S a is or y£, which contradicts our assumption 
that ao =o^0, y 7 ?- Now we need to find the values of ag and 01, however it is 
easy to check that all the possible values lead to a = or \/f • Therefore, we proved 
that at for all i. 

Since every at ^ 0, by (|4.3[) we have that 



together with aoai = a 2 + £ we can prove that 

Q _ Qpfll «2Q3 Q2i-2Q2i-l 

an a\a2 a^a^ an-\an 

and 

a\ 



a2i+i \a 2 + £, / 

Therefore we get (|4.4[) and the period N = 2 • ord(l + £/a 2 ). □ 

Lemma 4.4. Let f be a mapping from F 2 ™ to itself and /(0) = 0. Then f is an 
additive mapping if and only if Af = F 2 ™ x F 2 ™ ■ 

Proof. If / is additive, then for each (a, b) € F 2 n x ¥2™ there is 

f(x + a) + f{x) + f(x + b + a) + f{x + b) = f(a) + f(a) = 0. 

Hence Af = F 2 » x F 2 „. 

If Af = F 2 n x F2", then for each given a, 

fix + a)+f(x)+fiy + a)+f(y)=0, 

which means the mapping x 1— > f(x + a) + fix) is constant. Notice that /(0) = 0, 
we have fix + a) = f(x) + /(a), i.e. / is additive. □ 

Now, we can prove the following theorem. 

Theorem 4.5. Let f be a mapping from F 2 ™ to itself with /(0) = 0. Let £ be a 
nonzero element mFjn . WhenV n := {l/(l+a) : a is a primitive element o/F 2 n}U 
{1} spans ¥2^ over ¥2, then the following are equivalent: 

(1) {ia,Z/a):a£F 2 n}CA f ; 

(2) f is an additive mapping. 
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Proof. By Lemma l4~4l we only need to show that if {(a, £/a) : a £ F^} C Af then 

Af=¥ 2 n X F 2 n. 

If a = 1 + £/a 2 is a primitive clement, then by Lemma 14.31 any c £ F^™ appears 
exactly twice in S a , and one of the corresponding indices of a% — c is odd. the other 
is even. Now we fix c and assume that a is primitive and ak = c, then 

k is odd; 
k is even. 

Since (a*;, ak + cffc+i) = (ak, G .4/, it is easy to get that (ak,a.k+i) £ Af. Notice 
that a 2 = £/(l + a), there is 

€ 1 \ ... 1 

c, : a is a primitive clement of F2™ > C .Af . 

c 1 + a J J 

Since (c, £/c) is also in .A/, by Lemma l4T2"l (2) we see that (c, d£/c) G A./, where d 
is a linear combination of elements in V n ■ Therefore if V n span F2™ , we have that 
Af 2 F?m x Fjn, i.e. / is additive. 

□ 

Let Tr„ : ¥ 2 n — > ¥2 be the trace mapping. Notice that V n spans F2™ over F2 if 
and only if for any f3 £ F^, there exists some a £ V n such that Tr„(/3a) = 1, which 
actually holds for n > 18 by setting q = 2, r = m = I = 1, fi(x) = -Jj-^ and ti = 1 
in the following theorem. 

Theorem 4.6 (Stephen D. Cohen [9]). Let fi(x), . . . , f r (x) £ ¥ q n(x) form a 
strongly linearly independent set over ¥ q with deg /, < ra, i = l,...,r and let 
ti, . . . , t r £ ¥ q be given. Also let I be any divisor of q n — 1. Suppose that 

n > A(r + log q (9.8l 3/4 rm)). 

Then there exists an element 7 £ ¥ q m of order (q n — l)/l such that 

Ttnifiid)) = th i = l,...,r. 

Using MAGMA [5] program, we can show that V n also spans F2™ for n < 18. 
Hence, we can remove the condition on V n in Theorem 14.51 



Theorem 14.51 *. Let n be a positive integer and / be a mapping on ¥2™ where 
/(0) = and Im(/) = {0, £} with £ 7^ 0. Then / is a planar mapping if and only if 
/ is additive. 

5. Component functions of Fj-representation 

Through the F£ -representation of RDSs in relative to Z£ , we see that the 
component functions of h, defined as YlieA^i f° r eacn nonempty set A C F^, are 
the ingredients to build up (2™, 2™, 2", 1)-RDS. 

Notice that Ah, a (x) is bijective if and only if all the component functions of 
Aft.a(x) are balanced (the image set has the same cardinalities of and 1 £ F 2 ). 
We define the shifted-bent (or bent^) function f with respect to A C {0, 1, • ■ ■ n— 1}, 
such that for each a 7^ (0, • ■ ■ ,0) 

(5.1) f{x + a) + f{x)+Y J x i a i 
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are balanced, where x = (xq,xi,--- ,x n -i), a = (ao,ai,--- ,a„_i). We call A 
the shift index set of f. If A is empty, then shifted-bent and bent functions are 
the same. As the relation between p-ary bent function and planar function with 
odd p, the investigation of shifted-bent functions is helpful to the understanding 
of (2™, 2™, 2™, 1)-RDS, and it is also interesting to look at the problems from the 
shifted-bent function itself. 

Remark 5.1. In fact, bent4 is initially defined in [32| through a generalization of 
Walsh transformation, and it can be easily proved to be equivalent to the definition 
in this paper. 

Since linear and constant terms in / only contribute to constant and respec- 
tively in f(x + a) + f(x), they do not affect the shiftcd-bent property of /. Hence in 
the following part of this section, we assume that there is no linear or constant 
term in /. 

Example 5.1. Let A = {0, 1, • • • , n — 1}, then / = is shifted-bent. 

Next, we are going to show that there are many shifted-bent functions. More- 
over, for large n the degree of the corresponding polynomial of shifted-bent func- 
tion can be larger than 2 (for small n, at least by computer program we find 
that for n = 4 there is no non-quadratic one at all). Let x = (xq,xi, ■ ■ ■ 
V = {yoiVi, • • • iVn-i) € F2, we define the inner product of x and y as (x,y) := 
y^i—o XiVi- Firstly we have a construction which is similar to the Maiorana- 
McFarland bent functions: 

Theorem 5.1. Let g be an arbitrary Boolean function on F?? , then 

f ■ (x,y) i-> (x,U(y)) + g(y) 

is shifted-bent with respect to any subset of the indices of {yi : i = 0,1, - ■ ■ ,n — 1} 
if and only if Id is a permutation on F% . 

Proof. Let the subset of {yi : i = 0, 1, ■ ■ ■ , n — 1} be denoted by A. Let IL be the 
i-th coordinate function of Id, for (a, b) ^ (0, 0) we have 

(5.2) f{x + a,y + b) + f{x,y) + ^2yA 

7i — l n — 1 

= ^ Xi(TLi(v + b) + Ui(y)) + J2 ai u i(v + b ) + 9{y + b)+ g(y) + V^- 

i=0 i=0 iSA 

When b = 0, it equals 

n-l 
i=0 

which is balanced for all a ^ if and only if II is a permutation. 

When b 7^ 0, we only have to show that if II is a permutation, then (|5.2p is 
balanced. For each given y, since II(y + 6) + H(y) ^ 0, (|5.2[) defines a balanced 
Boolean function on x € FJ. Hence we proved the claim. □ 

By the previous theorem, it is easy to show: 

Corollary 5.2. Let g be an arbitrary mapping from F2™ to itself, and define 
/ : F 2 n x F 2 n -> F 2 n by 

/ : (x,y) i-> xll(y)+g(y). 
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Then every component function of / is shifted-bent with respect to an arbitrary 
subset of the indices of {yi : i = 0, 1, • • • ,n— 1} if and only if II is a permutation 
on F21 • 

It is easy to prove the following secondary construction of shifted-bent functions: 

Proposition 5.3. Let m, n be positive integers, and let H : F£ — ► F2 be a shifted- 
bent Boolean function with respect to some A,-, i = 1, 2. Then 

f(x,y) ^n^ + n^y) 

is shifted-bent with respect to Ai U A2. 

By Theorem 15.11 we see that there exist shifted-bent functions which are not 
quadratic. Furthermore, Corollary 15 .21 shows us that it is possible to combine them 
together to a "vectorial" one. Recall Question Q] in Section 3, our aim is to show 
the existence or nonexistence of a mapping h : Fj — > (the F?j -representation), 
which is an n-dimcnsional combination of shifted-bent functions hi with shift index 
set A, = {i} for i = 0, 1, . . . ,n — 1 and at least one of hi is of degree larger than 2. 
Therefore we propose this question again in a more general way: 

Question 2. What is the maximal m for each n, such that Boolean functions 
fi : Fj -> F2, i = 0, 1, • ■ ■ satisfy the following two conditions: 

(1) For each non-empty set il C {0,...,m — 1}, Y^ienfi ^ s a shifted-bent 
function with respect to Q; 

(2) At least one of fi is non-quadratic? 

Hence Question [T] is about whether m = n is possible for some n. 
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